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ABSTRACT 

We describe the computer demonstration of the Remote Agent 
Experiment (RAX). The Remote Agent is a high-level, model- 
based, autonomous control agent being validated on the NASA 
Deep Space 1 spacecraft. 
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1. INTRODUCTION 

The Remote Agent (RA) is autonomous control software that uses 
models to reason about the system that it controls and the 
environment it is in. It does so to accomplish goals over extended 
periods including diagnosing and recovering from failures without 
contact with human operators. RA is being validated on the 
NASA Deep Space 1 spacecraft (DS1) during the Remote Agent 
Experiment (RAX) scheduled for mid-May, 1999. During RAX, 
RA will control DS1 and perform several activities including 
taking pictures, thrusting the ion propulsion engine, and diagnosing 
and recovering from simulated failures. RA, its major components, 
and RAX have been described in several papers [1][5][6][7][8]19]. 
This paper describes a computer demonstration that was designed 
to aid people unfamiliar with spacecraft and autonomous agent 
technologies to better understand RA and RAX. 

2. REMOTE AGENT ARCHITECTURE 



As illustrated in figure l , RA consists of four components, the 


Planner/Scheduler (PS), the Mission Manager (MM), the Smart 
Executive (Exec), and the Mode Identification and 
Reconfiguration module (MIR). 

2.1 Planner/Scheduler and Mission Manager 

The Planner/Scheduler (PS) generates the plans that RA uses to 
control the spacecraft [5]. Given the initial spacecraft state and 
goals, PS generates a set of synchronized high-level activities that, 
once executed, will achieve the goals. Mission goals are 
maintained by MM [1]. 

PS consists of a heuristic chronological-backtracking search 
operating over a constraint-based temporal database [5]. PS 
begins with an incomplete plan and expands it into a complete plan 
by posting additional constraints in the database. These constraints 
originate from the goals and from constraint templates stored in a 
model of the domain. PS consults domain- specific planning 
experts to access information that is not in its model. The 
temporal database and the facilities for defining and accessing 
model information during search are provided by the HSTS system 
[4]. 

2.2 Smart Executive 

Exec is a reactive, goal-achieving, control system that is 
responsible for: 

• Requesting and executing plans from the planner 

• Requesting and executing failure recoveries from MIR 

• Executing goals and commands from human operators 

• Managing system resources 

• Configuring system devices 

• Reach and maintain an appropriate safe- mode as necessary 

• System-level fault protection 

Exec is goal-oriented rather than command-oriented. We define a 
goal as a state of the system being controlled that must be 
maintained for a specified length of time. For example, consider 
the goal: keep device A on from time x to time y. If Exec were to 
detect that device A is off during that period, it would perform all 
the commands necessary to turn it back on. This ability is 
particularly useful in hostile environments where exogenous events 
can cause devices to behave unpredict ably. 

Exec controls multiple processes in order to coordinate the 
simultaneous execution of multiple goals that are often inter- 
dependent. In order to execute each goal, Exec uses a model- 
based approach to create a command procedure, which is often 
complex, designed to robustly achieve the goal. 



2.3 Mode Identification/Reconfiguration 

The Livingstone inference engine provides the mode identification 
(MI) and mode reconfiguration (MR) ftinctionality in MIR. To 
track the modes of system devices, Livingstone eavesdrops on 
commands that are sent to the spacecraft hardware by the Exec. 
As each command is executed, Livingstone receives observations 
from spacecraft s sensors, abstracted by monitors in the 
spacecraft s control software. Livingstone combines these 
commands and observations with declarative models of the 
spacecraft components to determine the current state of the system 
and report it to the Exec. If any such failures occur, Livingstone 
will be used to find a repair or workaround that allows the plan to 
continue execution. 

Livingstone uses algorithms adapted from model-based diagnosis 

[2] to provide the above functions. The key idea underlying 
model-based diagnosis is that a combination of component modes 
is a possible description of the current state of the spacecraft only 
if the set of models associated with these modes is consistent with 
the observed sensor values. This method does not require that all 
aspects of the spacecraft state are directly observable, providing an 
elegant solution to the problem of limited observability. 

3. REMOTE AGENT EXPERIMENT 

RAX was designed to demonstrate the capabilities of RA on DS1. 
During RAX, RA will plan how to thrust DS I s ion engine, when 
to take pictures of asteroids, and when to communicate with Earth. 
False data will be injected at certain times, unknown to RA, that 
simulate spacecraft failures. RA will diagnose the cause of these 
failures and often will be able to find an action that repairs the 
failure. Otherwise, RA will put the spacecraft into a safe state and 
find a new plan that accommodates the problem. In addition to 
operating on its own, RA will demonstrate cooperation with 
mission controllers by accepting new mission goals and advice on 
health of the spacecraft. 



Figure 3. The Remote Agent Demonstation Window 


To demonstrate RA, we use a window, in figure 3, that shows the 
messages as they pass between RA and the other spacecraft 
software and between RA components. This visualization of the 
RA can run in real-time while RA is running to show RA’s current 
state, or from a log file of a prior RA run. 

The top part of the window has a circle for each component of the 
RA and spacecraft flight software components RA communicates 
with. For example, RA sends messages to the attitude control 
system (ACS) to point the spacecraft toward Earth for 
communication or toward an asteroid for imaging. A small 
“speech balloon ’ travels back and forth between the software 
components showing which two are currently communicating. In 
the bottom portion of the window, the current message being 
transmitted is converted into a simplified English representation. 
Sensor observations from the spacecraft to RA are shown as 
moving yellow spheres. In figure 3, MIR is confirming to Exec 
that the main engine is ready. The demonstration shows a typical 
6-day scenario including the ground uplink the command for RA to 
start its mission, PS interacting with the planning expert modules 
to create three plans. Exec executing the plans, and MIR sending 
diagnoses and recoveries to Exec. ^ 
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